Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806/be6498ed-47b7-3044-86c5-1d7cda58f946.roa
File:                     be6498ed-47b7-3044-86c5-1d7cda58f946.roa (raw, json)
Hash identifier:          ckw4sb5wylRmSk44y+b83M7PM34VM4qMz7e5C6KNu+s=
Subject key identifier:   43:5E:1E:F5:B4:7A:30:F2:09:C7:91:6A:A7:7D:CC:0F:D0:0B:AB:A1
Certificate issuer:       /CN=c76c1974-4b4f-4fa0-9119-4c9a119ed806
Certificate serial:       010D0C9F4328584EB2B1FCBC02042462EEE78180
Authority key identifier: BF:F1:03:37:F6:A7:FC:E0:89:F1:48:ED:48:BE:76:22:F1:63:07:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806/be6498ed-47b7-3044-86c5-1d7cda58f946.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     210
IP address blocks:        192.84.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806/c76c1974-4b4f-4fa0-9119-4c9a119ed806.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806/c76c1974-4b4f-4fa0-9119-4c9a119ed806.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:fc:bc:02:04:24:62:ee:e7:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76c1974-4b4f-4fa0-9119-4c9a119ed806
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=90925ba1-0760-4f63-a2de-a6cdf652493f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:8e:dd:5c:fb:30:41:97:99:4f:f2:76:11:
                    0c:43:95:ee:45:81:fa:3f:cf:9d:c2:a7:9c:6f:f9:
                    39:96:ce:f6:80:c0:b1:c8:1b:1a:ba:bf:6f:4f:2d:
                    16:46:c8:22:45:ee:96:54:12:ca:ef:d6:84:3d:26:
                    22:5e:fd:34:25:b5:4a:38:35:79:f2:97:29:e4:e5:
                    d2:e5:29:48:44:8c:b5:1f:db:a1:26:53:7f:41:72:
                    ea:a2:8f:44:e1:e2:9a:4e:2c:4e:63:61:31:69:a3:
                    df:b4:e2:a9:a2:2c:f7:77:86:f6:44:6f:98:c3:d4:
                    09:82:a1:0e:e6:c4:85:08:89:ad:33:56:4c:f4:dc:
                    f4:bf:e4:74:8b:a0:b4:19:ae:4d:f1:76:30:32:38:
                    f1:17:10:b1:93:56:dd:86:d9:87:a6:92:fe:8d:22:
                    b3:d6:e4:fe:54:31:66:c9:3d:20:8d:c1:07:fc:08:
                    98:ff:06:af:a2:3f:20:ab:45:58:dc:67:de:fb:db:
                    66:b1:2d:31:db:78:f8:bf:ef:f9:94:48:f4:ce:56:
                    52:39:8a:6f:99:13:05:ee:27:7f:37:98:22:a4:70:
                    6b:3b:d1:e9:f8:7d:4b:12:dc:73:73:ae:3a:7e:be:
                    88:fa:96:bd:69:27:aa:f9:f4:2b:64:07:72:aa:5e:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5E:1E:F5:B4:7A:30:F2:09:C7:91:6A:A7:7D:CC:0F:D0:0B:AB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806/be6498ed-47b7-3044-86c5-1d7cda58f946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806/c76c1974-4b4f-4fa0-9119-4c9a119ed806.crl

            X509v3 Authority Key Identifier:
                keyid:BF:F1:03:37:F6:A7:FC:E0:89:F1:48:ED:48:BE:76:22:F1:63:07:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c76c1974-4b4f-4fa0-9119-4c9a119ed806.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:34:b1:ec:26:22:d4:76:a9:ec:13:83:d5:62:d6:2a:62:35:
         1a:8e:1b:3d:04:e3:73:60:3d:fa:30:ef:ee:db:55:37:d9:87:
         43:26:3c:e2:b5:e1:12:9d:ab:87:39:6d:1b:bd:ee:6a:5d:1c:
         4a:ca:95:9c:48:23:e0:a9:6b:7b:aa:f1:34:dc:25:e5:ed:a8:
         3a:dd:8a:6c:5d:7e:11:f1:ca:f3:a4:a7:94:e1:65:6f:3b:9e:
         e1:b4:8e:a8:e0:6c:82:99:e2:f8:69:ee:38:aa:3e:01:64:ab:
         c2:1f:20:6c:16:d4:27:46:f7:32:25:7c:3f:92:29:6e:43:52:
         f6:3a:a5:d0:62:ea:78:ed:2e:e9:e0:73:e2:28:73:51:0c:55:
         fa:f8:b5:34:0b:d5:f2:7a:ed:33:3d:65:c7:ac:74:84:c1:97:
         34:02:f2:df:ae:2e:81:a5:c5:c5:33:0e:f6:a0:e7:60:e7:3c:
         af:68:ca:3b:ef:3f:74:66:a7:3a:32:b6:a7:73:f1:60:67:8e:
         63:5c:d5:27:cf:06:43:1c:28:20:14:f2:00:cc:55:32:07:40:
         ee:a3:34:be:3c:7c:d1:a2:d7:87:7d:51:9f:ea:dc:8c:b7:ab:
         8f:94:33:8f:f5:3f:51:be:3d:66:18:fd:40:91:b9:8f:61:97:
         c7:ed:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:09:30 2026 by rpki-client